Privacy policy
15 October 2026
Plain Cup is a site for finding and organizing pickup games in Luxembourg. It is run by Matteo Facchetti. Questions about your data go to [email protected].
What we store
If you only browse games, we do not ask you to create an account.
When you sign in, we store your first name, last name, and email address. A profile photo is optional.
A phone number is optional. Add one if you want an organizer to call you or message you, or if you want Plain Cup notices on WhatsApp. The organizer of a game you join can see it. Other players cannot. We do not verify the number. WhatsApp notices start only after you message Plain Cup, and they stop if you reply STOP.
Games store the sport, place, time, description, price, and payment note the organizer typed, plus who joined, who is waiting, and attendance. We do not take card payments.
We keep an in-app notification log for your account. If you leave email notices on, we try to send those notices to your email as well.
A problem report is stored and shown to the organizer of that game.
Sign-in
Email sign-in uses a one-time link. The link expires after 30 minutes. We delete it after you use it or it expires. We never store a password.
Google sign-in asks Google for your name, email address, and profile photo. We also store Google’s account id so we can recognize you next time. We do not receive your Google password. If the same email is used for both Google and email sign-in, both methods open the same Plain Cup account.
A session cookie keeps you signed in on this browser. It is not used for advertising. A short-lived cookie is set while a Google sign-in is in progress.
Who else handles it
The site is hosted on Vercel. Cloudflare sits in front of plaincup.com and sees connection data such as your IP address.
Accounts and games are stored in a Postgres database hosted by Supabase in the EU (Paris).
Google handles Google sign-in. Email notices, when they are sent, go through Resend. WhatsApp notices go through Meta.
We do not sell your data.
How long we keep it
The account stays until you delete it from your profile. Deleting it removes your name, email, photo, phone number, sign-in records, and notification history. Past games stay so the attendance record remains accurate, with you shown as a former player.
You can ask for a copy of your data, or a correction, at the email above.